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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

Claim 1 (Currently Amended): A content scanning system for electronic documents 
such as emails comprising: 

a) a link analyser operative to identify hyperlinks in the content of electronic 
documents; 

b) a hyperlink replacer operative to modify the electronic documents by replacing 
hyperlinks to external objects identified by the link analyser by new hyperlinks to respective 
targets on a trusted server; and 

c) b) an object server operative on receipt of a request to retrieve an external object 
from one of said targets on the trusted server to cause proc e ssing m e ans for causing a content 
scanner to scan the external object referenced by the hyperlink which was replaced by the new 
hyperlink to said one of said targets obj e cts r e f e r e nc e d by hyp e rlinks id e ntifi e d by th e link 
analys e r and to determine the acceptability of the object obj e cts according to predefined rules, 
the object server proc e ssing m e ans being operative, responsive to a hyperlink being to an 
external object e xt e rnal to th e document which obj e ct is determined by the content scanner to be 
acceptable, to retrieve the external object and supply it in response to the request stor e the 
r e tri e ved e xt e rnal obj e ct on a tru s t e d s e rv e r , the object server proc e ssing m e ans being operative, 
responsive to a hyperlink being to an external object e xternal to th e docum e nt which is 
determined by the content scanner to be unacceptable, to perform remedial action ; and 

(g) hyp e rlink r e placing means for modifying e l e ctronic docum e nts by r e placing th e 

hyp e rlink to an e xt e rnal obj e ct id e ntifi e d by the link analys e r by a hyp e rlink to th e copy of th e 
e xt e rnal obj e ct stor e d on th e a trust e d s e rv e r . 
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Claim 2 (Currently Amended): A system according to claim 1 wherein the link 
analyser and the object server proc e ssing m e ans are operative to recursively process hyperlinks 
identified in sueh external objects. 

Claim 3 (Previously Presented): A system according to claim 2 in which only a 
maximum depth of recursion is permitted and the document is flagged as unacceptable if that 
limit is reached. 

Claim 4 (Previously Presented): A system according to claim 1 wherein the remedial 
action comprises one or more of: 

flagging or modifying the document to indicate that the content scanner has found the 
object to be unacceptable; 

modifying the document by replacing the hyperlink by a non-functional hyperlink; and 

quarantining the document and sending the intended recipient an alert advising the 
recipient that this has been done. 

Claim 5 (Currently Amended): A method of content-scanning electronic documents 
such as emails comprising: 

a) using a link analyser to identify hyperlinks in the content of electronic documents; 

b) modifying the electronic documents by replacing hyperlinks to external objects 
identified by the link analyser by new hyperlinks to respective targets on a trusted server; 

c) b) responsive to a request to retrieve an external object from one of said targets on 
the trusted server, using a content scanner to scan the external object referenced by the hyperlink 
which was replaced by the new hyperlink to one of said targets obj e cts r e f e r e nc e d by hyp e rlink s 
id e ntifi e d by th e link analys e r and to determine the acceptability of the objects according to 
predefined rules; 

d) e) responsive to a hyperlink being to an external object e xt e rnal to th e docum e nt 
which object is determined by the content scanner to be acceptable, retrieving the external object 
and supplying it in response to the request storing th e r e tri e v e d e xt e rnal obj e ct on a trust e d 
s e rv e r ; and 
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e) d) responsive to a hyperlink being to an external object e xt e rnal to th e docum e nt 
which object is determined by the content scanner to be unacceptable, performing remedial 
actiont-and 

e) modifying e l e ctronic docum e nts by r e placing th e hyp e rlink to an e xt e rnal obj e ct 

by a hyp e rlink to th e copy of th e e xt e rnal obj e ct stored on th e trust e d se rv e r . 

Claim 6 (Currently Amended): A method according to claim 5 wherein the steps a) 
through e) and b) are used recursively to process hyperlinks identified in such external objects. 

Claim 7 (Original): A method according to claim 6 in which only a maximum depth of 
recursion is permitted and the document is flagged as unacceptable if that limit is reached. 

Claim 8 (Previously Presented): A method according to claim 5, wherein the 
remedial action comprises one or more of: 

flagging or modifying the document to indicate that the content scanner has found the 
object to be unacceptable; 

modifying the document by replacing the hyperlink by a non-functional hyperlink; and 

quarantining the document and sending the intended recipient an alert advising the 
recipient that this has been done. 

Claims 9-12 (Canceled). 

Claim 1 3 (New): A system according to claim 1 , wherein the object server is 
operative, responsive to a hyperlink being to an external object external to the document which 
object is determined by the content scanner to be acceptable, to retrieve the external object, to 
store it on the trusted server and to supply it in response to the request. 

Claim 14 (New): A method according to claim 5, wherein the step of retrieving the 
external object and supplying it in response to the request, responsive to a hyperlink being to an 
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external object which is determined by the content scanner to be acceptable, further comprises 
storing the retrieved object on the trusted scanner. 

Claim 15 (New): A method of content-scanning electronic documents comprising: 

a) identifying first hyperlinks in contents of electronic documents; 

b) modifying the electronic documents by replacing the identified first hyperlinks 
with different second hyperlinks which point to a trusted server; 

c) storing data to relate the second hyperlinks to the first hyperlinks; 

d) in response to a request received by the trusted server when one of the second 
hyperlinks is selected, using the stored data to determine the first hyperlink corresponding to the 
selected second hyperlink and retrieving an object using the determined first hyperlink; 

e) scanning the retrieved object in accordance with specified rules; 

f) making the retrieved object available in response to the received request if the 
retrieved object is determined to be acceptable in accordance with the specified rules; and 

g) performing remedial action if the retrieved object is not determined to be 
acceptable in accordance with the specified rules. 

Claim 16 (New): The method according to claim 1 5, further comprising: 
generating the second hyperlinks based on one or more a name of the trusted server, a 

time, a process identifier, a count that increments for each second hyperlink and a random 

number. 

Claim 17 (New): An e-mail gateway comprising a trusted server configured to scan 
e-mail, the trusted server programmed to perform operations comprising: 

a) identifying first hyperlinks in contents of e-mails; 

b) modifying the e-mails by replacing the identified first hyperlinks with different 
second hyperlinks which point to a trusted server; 

c) storing data that relates the second hyperlinks to the first hyperlinks; 
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d) in response to a request received by the trusted server when one of the second 
hyperlinks is selected, using the stored data to determine the first hyperlink corresponding to the 
selected second hyperlink and retrieving an object using the determined first hyperlink; 

e) scanning the retrieved object in accordance with specified rules; 

f) making the retrieved object available in response to the received request if the 
retrieved object is determined to be acceptable in accordance with the specified rules; and 

g) performing remedial action if the retrieved object is not determined to be 
acceptable in accordance with the specified rules. 
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